A final-revision summary for the Google Cloud ACE. Study aid only - no notes in the proctored exam.
Resource hierarchy
Organisation → Folders → Projects → Resources. IAM and billing attach at these levels.
Compute options (when to use)
| Service | Use |
|---|---|
| Compute Engine | Full-control virtual machines |
| GKE | Managed Kubernetes for containers |
| Cloud Run | Serverless containers |
| App Engine | Fully managed PaaS for apps |
| Cloud Functions | Event-driven serverless functions |
Cloud Storage classes
| Class | For |
|---|---|
| Standard | Frequent access |
| Nearline | ~Monthly access |
| Coldline | ~Quarterly access |
| Archive | Rare access, lowest cost |
IAM
| Role type | Idea |
|---|---|
| Basic | Owner, Editor, Viewer (broad) |
| Predefined | Service-specific, least privilege |
| Custom | Tailored permission sets |
| Service account | Identity for workloads, not people |
Handy gcloud patterns
gcloud config set project · gcloud compute instances ... · gcloud container clusters ... · gcloud iam ...